11/30/2004 17*: 29 FAI 7037612375 

U.S. Application No. 09/865,026 
Docket No. YOR920000165US1 
(YOR.203) 


McGinn&Glbb.PLLC 


AMENDMENTS TO THE CLAIMS: 


1 . (Original) A method of preventing counterfeiting 
providing a smart card with a cryptograpl i< 

which cannot be accessed completely by a predet|errained 
wherein said cryptographic structure can 

agent thereof. 


of a smart card, comprising: 
ic structure for authorizing the smart card 

small number of readings, 
I >e built only by whoever emits the card or an 


2. (Original) The method of claim I, further 
providing a reader for reading said smart 
information related to unauthorized smart cards, j 
is operatively connected to a network, only when 
said network. 


3 . (Original) The method of claim 1 , whereir i an entire process of said method is 
performable off-line. 

4. (Original) The method of claim 1, wherein 1 said smart card carries thereon predetermined 
N channels as CI, C2,..., CN, where N is an integ a*. 

wherein each channel Ci, with i equal to 1 . 
wherein hi is the i th high number and li is tthe 


@)0 


comprising: 

( ;ard and including a database holding 
aid reader being on-line, such that said reader 
said database of said reader is being updated by 


2, N, carries a pair of numbers (hi, li), and 
A low number. 
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5. (Original) The method of claim 4, further 
using public key cryptography with 

Vi" 1 in each channel i, 

wherein each function Vi* 1 is known 

party representing an owner of the smart card. 
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associated 


publ cly, and Vi is known only to a predetermined 


6. (Original) The method of claim 5, wherei i 
that hi = Vi(li), or hi = Vi(K(li)), where K represents 
function, and 

wherein each li contains a plurality of synibols for redundancy 


7. (Original) The method of claim 6, further 

processing, using an invertible function f ^hich 
numbers in said smart card satisfy l(i+j) = f" (li), w 
f. 


8. (Previously presented) The method of claijn 

number generator, which, when a card is read, chaoses 

b between 1 and N, 

wherein before processing the smart card, 
using the public keys Va" 1 and Vb" 1 , checking 

(hb, lb) are compatible, and, consequently, that tins 

legitimate card. 


comprising: 

encoding and decoding functions Vi and 


for each i in I, 2 N, the pair (hi, li) is such 
a publicly-known cryptographic hash 


omprising: 

is made public, such that the low 
here f represents the j* iteration of the function 


6, wherein a reader includes a random 
a pair (a, b) of distinct numbers with a < 

he reader obtains the pair (ha, la) and hb; 

by the reader whether the pairs (ha, la) and 
numbers ha, la, and hb belong to a same 
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9. (Original) The method of claim 4, wherei 1 a reader obtains a content of only two of said 
channels. 


10. (Original) The method of claim 1, further 
periodically communicating, by a reader 
predetermined characteristic of the card is checkdd 


comprising: 

c f said smart card, with a data base where a 


1 1 . (Original) The method of claim 1 0, wherein 
whether a smart card has delivered more than a 
smart card. 


1 2. (Original) The method of claim 1 1 , wherein 
money, the data base communicates a correspond ing 
that smart cards carrying said corresponding num)ber 


@005 


the predetermined characteristic comprises 
predetermined amount of money to a user of the 


if a card is detected as delivering too much 
number 11 to all readers in a network, so 
are declined. 


13. (Original) The method of claim 1, wherei l said cryptographic structure is changed 
periodically. 

14. (Original) The method of claim 1, wherei] i said smart card is invalidated after a 
predetermined time of usage. 
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1 5. (Original) The method of claim 8, whereiji said pairs (hi, li) to be contained on the smart 
card are generated by: 

choosing a prefix of 11 once for all transactions, or changed whenever needed, wherein 
said prefix is publicly known; and 

providing a sequence, such that the sequence 
chosen twice, and so that corresponding other li's 


1 6. (Original) The method of claim 1 5 , furthe r 
concatenating the prefix and the sequence 
choosing a function f which is invertible 

= f(12), and so forth. 


comprising: 
to form 11; and 
and is publicly known, to construct 12 = f(ll), 13 


17. (Original) The method of claim 16, wherejin the function f is chosen to be the identity 
map, in which case 11 = 12 - 13 ~ .. =IN. 


1 8. (Original) The method of claim 17, choos ng, 
pairs, such that a first private key V 1 is for competing 
for computing h2 = V2(12), and so on. 


1 9. (Original) The method of claim 1 8, furthe r 
verifying whether the smart card is authentic; 
checking whether the smart card is not in 


is generated so that a same number is not 
are not chosen as new lis. 


for a number N, N public key-private key 
hi = VI (11), a second private key V2 is 


comprising: 
; and 

a. list of cards to be refused. 
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20. (Original) The method of claim 1 , wherei: l, 
random generator is prompted which provides twja 
between .1 and N, with a < b. 
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Lb, 


21 . (Original) The method of claim 20, wherein 
smart card which delivers two high numbers ha. 

wherein the pair (a, b), together with a furjction 
compute the low number lb = f <b " a) (la), said memc 
and W 1 . 


said numbers a, b are transmitted to the 
, and a low number la in a channel a, and 
fin a memory in the reader, are used to 
ry in said reader delivering public keys Va* 1 


22. (Original) The method of claim 2 1 , where 
together with the pairs (ha, la) and (hb, lb), to ver 
corresponding keys, and that the pairs are from a 


23 . (Original) The method of claim 1 , further 
performing a final validation of the smart 
contacting a central data base if an 

penalty; and 

checking with a local data base in 
periodically by contact between said local database 


@007 


when the smart card is read by a reader, a 
integer numbers, a and b, which are not 


in the public keys are used by a comparator 
fy that the pairs are compatible with the 
>ame legitimate card. 


omprising: 

:ard by at least one of: 
entire transaction is made on-line with no 

reader, said local database being refreshed 
and said central database. 
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24. (Original) A method of preventing counterfeiting 

providing a smart card such that none of confidential 

key for authorizing the smart card, is carried on 
reading said card by a reader such that in 

predetermined small amount of information which 


iting of a smart card, comprising: 

information and a cryptographic 
smart card; 
$ach reading, said reader reads only a 
makes the card unique. 


the 


25. (Original) The method of claim 24, where 
comprises substantially an off-line transaction. 


26. (Original) A system for preventing cloning 

a smart card such that a cryptographic structure 

carried on the smart card; and 

a reader for reading the smart card and including 

being updated periodically with a list of unauthorized 
wherein said cryptographic structure is ke^t 

thereof. 


27. (Original) A signal-bearing medium tangil ily 
instructions executable by a digital processing apparatus 
counterfeiting and cloning of smart cards, comprising: 

providing a smart card with a cryptograph 
which cannot be accessed completely by a predett rrnined 


@008 


n a transaction performed under said method 


of a smart card, comprising: 

for authorizing the smart card is not 

a database for linking to a network and 
smart cards, 
secret by whoever emits the card or an agent 


embodying a program of machine-readable 
to perform a method for preventing 


c structure for authorizing the smart card 
number of readings, 
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wherein said cryptographic structure can 

agent thereof. 
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be built only by whoever emits the card or an 
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